Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iOkJdTWkjMDL6HJ-DahUPYra7Gs.roa
File: iOkJdTWkjMDL6HJ-DahUPYra7Gs.roa (raw, json)
Hash identifier: eBSy0ROhXzHymO0vrqjqaxcAwA6VJHfYjPZtbC0cAzM=
Subject key identifier: 88:E9:09:75:35:A4:8C:C0:CB:E8:72:7E:0D:A8:54:3D:8A:DA:EC:6B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095171D8520F6EEDF0397062803CC75
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iOkJdTWkjMDL6HJ-DahUPYra7Gs.roa
Signing time: Mon 02 Jan 2023 03:44:57 +0000
ROA not before: Mon 02 Jan 2023 03:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41124
IP address blocks: 93.171.64.0/21 maxlen: 24
92.253.208.0/22 maxlen: 24
146.158.64.0/22 maxlen: 24
31.148.140.0/22 maxlen: 24
146.120.200.0/22 maxlen: 24
95.47.32.0/22 maxlen: 24
95.46.232.0/21 maxlen: 24
95.47.192.0/22 maxlen: 24
146.120.152.0/22 maxlen: 24
146.158.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jan 2023 21:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:17:1d:85:20:f6:ee:df:03:97:06:28:03:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88e9097535a48cc0cbe8727e0da8543d8adaec6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:88:47:b0:33:c5:a9:eb:df:4a:cc:4f:25:
9b:e4:c4:30:b6:9f:61:b4:9d:e3:1c:37:ad:88:fb:
0c:81:ba:99:d4:58:33:ac:ba:bd:7a:6c:e5:ea:5c:
47:1e:30:05:dd:c4:15:8d:23:be:fe:6f:dd:4e:4f:
16:77:fc:3c:3d:ae:f4:34:6f:aa:5a:4b:9a:3c:ce:
f9:38:a2:95:54:16:8a:ed:de:3d:6a:4a:ab:52:d0:
63:8f:c9:af:41:bc:a0:55:51:1e:85:73:f2:70:60:
68:6a:b7:48:c4:a3:a6:4d:84:d8:83:66:57:be:ee:
0e:56:7d:50:ca:64:23:02:58:b1:c2:b1:88:ab:5f:
a7:6c:eb:04:1c:66:5b:70:75:bc:a3:4a:22:c6:dc:
14:c4:43:49:ca:34:76:1a:d3:51:97:e3:dc:5a:c1:
dd:61:8f:6a:67:53:5c:61:2d:7e:15:7a:ab:03:85:
bd:4f:3a:7b:6c:1d:8f:10:66:9c:74:2b:21:99:7e:
45:55:2d:4a:36:5f:57:86:10:ec:c8:30:91:88:46:
3d:00:4c:18:47:ac:d1:ae:14:cc:74:8c:fc:79:6a:
28:b5:bf:b4:4f:14:a4:61:7c:d2:15:09:f3:0b:a0:
8e:7f:11:60:27:72:1b:d2:3a:50:bc:2d:55:c4:0c:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E9:09:75:35:A4:8C:C0:CB:E8:72:7E:0D:A8:54:3D:8A:DA:EC:6B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iOkJdTWkjMDL6HJ-DahUPYra7Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.140.0/22
92.253.208.0/22
93.171.64.0/21
95.46.232.0/21
95.47.32.0/22
95.47.192.0/22
146.120.152.0/22
146.120.200.0/22
146.158.24.0/22
146.158.64.0/22
Signature Algorithm: sha256WithRSAEncryption
28:af:e6:ce:15:88:f9:b8:81:a9:d7:1f:65:a3:bd:d1:3b:aa:
a8:1b:34:bd:4b:25:ed:5b:4b:52:08:0e:05:59:e4:1d:66:c1:
9f:2a:77:98:55:64:e1:98:d6:42:4b:89:05:b9:90:39:de:bb:
9b:42:c2:81:a2:db:2f:15:07:fc:b7:ee:d3:06:6f:c4:cc:2f:
b3:bb:02:3d:3f:a4:56:e3:24:8f:d8:5a:d7:d7:9a:74:00:47:
c6:50:f3:ec:5b:ab:c1:3e:07:cb:79:88:38:cb:b1:e3:5a:e9:
35:47:11:35:a7:60:ad:e9:8c:84:0b:a2:a9:7a:a5:ef:86:1f:
f0:6f:ef:ed:c5:40:da:8f:f1:43:0a:6d:08:ad:0a:36:19:e2:
20:5a:e3:a9:b7:f1:8b:35:72:8d:3a:d1:1b:81:45:3d:65:97:
8d:40:83:e8:f6:3a:80:17:15:55:10:51:7b:45:9a:9e:76:b9:
97:e6:44:3b:7a:e7:f7:13:5d:7c:2e:c7:9c:d2:d6:7d:08:8b:
f7:42:79:f9:05:f7:3e:24:1d:3a:5f:39:2a:0e:2e:77:62:bc:
df:27:c6:e9:93:0e:3e:b9:64:9d:6b:38:3a:9a:f3:e7:3c:e8:
c4:78:94:d0:d5:10:c5:df:2e:39:a3:61:2b:f9:4f:af:ed:20:
2b:a0:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:51 2024 by rpki-client on console-ams.rpki-client.org